Authorisations (SAP)

Promenta solutions run within SAP and so where possible SAP standard authorisations are used. This document describes some exceptions where additional SAP authorisations are required and also any specific Promenta authorisations.

Where SAP standard authorisation objects are mentioned it is the responsibility of the customer to ensure that they are used correctly in conjunction with any authorisations a user may have and as detailed in SAPs documentation. The information about standard SAP authorisation objects is provided as a guide only – check SAP documentation for definitive information.

Document Uploading (SAP authorisations)

Many Promenta solutions store documents against objects such as vendor, material or journal in SAP. The documents are stored in the General Object Services (GOS) section of the screens.
To attach documents the user requires the authorisations below :

Auth Object : S_BDS_DS
ClassName = *
ClassType=*
Activity = 01,02,03,04,05,30

Auth Object : S_BDS_D
LiLo Class = *
Activity = 01,02,03,04,05,70

Auth Object : S_RFC
Activity=16
RFC_NAME=BDS_BAPI
RFC_TYPE=FUGR

Notification Emails (SAP authorisations)

Workflow emails are sent using the workflow background user – this user has full auths (SAP_ALL) and so no special authorisations are required for the workflow emails.
Notification emails (for example at the end of a process after the workflow is finished) are sent using the logged on users profile. In that case the authorisations below are required to enable the logged on user to extract the email address from other user ids.

Auth object : S_USER_GRP
ACTVT =  03 (display)
CLASS = *

Work Item Processing (SAP authorisations)

Administrators can use the Webforms Analyser to access the workflow log and also to perform certain activities on the workflows. The information below shows the authorisation requirements to enable that functionality. Note that this is not a complete list as these are all SAP-delivered authorisations and may be changed by SAP.

1. Forwarding Working Items
Auth Object : S_WF_WI
WI_TYPE = W
TASK_CLASS=*
WFACTVT=14 (un-reserve),26 (stop waiting) ,35 (forward)

2. Adopting work item (as administrator)
All authorisations as per 1.

Auth Object : S_WF_WI
WI_TYPE = W
TASK_CLASS=*
WFACTVT=27 (restart)

Workflow Responsibilities

Promenta makes use of SAP workflow responsibilities (OM object RY, SAP transaction OOCU_RESP) and as such requesters and approver need read access to the underlying SAP data to be able to evaluate workflow and find approver/reviewers or other workflow agents.

Object PLOG
INFOTYP = *
ISTAT = 1
OTYPE = RY  (responsibility)
PLVAR = <org level value – normally 01>
PPFCODE = DISP
SUBTYP = *

Object PLOG
INFOTYP = *
ISTAT = 1
OTYPE = AC  (rule)
PLVAR = <org level value – normally 01>
PPFCODE = DISP
SUBTYP = *

Object PLOG
INFOTYP = *
ISTAT = 1
OTYPE = RY  (responsibility)
PLVAR = <org level value – normally 01>
PPFCODE = DISP
SUBTYP = *

Object PLOG
INFOTYP = 1001
ISTAT = 1
OTYPE = US (user)
PLVAR = <org level value – normally 01>
PPFCODE = DISP
SUBTYP = A210

Object PLOG
INFOTYP = 1218 , 1240
ISTAT = 1
OTYPE = RY (responsibility)
PLVAR = <org level value – normally 01>
PPFCODE = DISP
SUBTYP = *